Germany

Magdeburg University Hospital

9,000 €

GDPR enforcement action by Data Protection Authority of Sachsen-Anhalt on 2023.

Rank · Sector

#148

of 270 in Health Care

Rank · Germany

#69

of 116

Rank · All fines

#1,480

of 3,050

Case details

Authority: Data Protection Authority of Sachsen-Anhalt
Date: 2023
Controller / Processor: Magdeburg University Hospital
Sector: Health Care
Quoted Articles: Art. 33 GDPR
Type of violation: Insufficient fulfilment of data breach notification obligations

Summary

The DPA of Sachsen-Anhalt has imposed a fine of EUR 9,000 on Magdeburg University Hospital. The clinic had failed to report to the DPA a data breach involving a former employee having unlawfully disclosed personal data from the clinic's systems to third parties.

Open original source Links to the regulator's original publication or another source.